exploratory-data-analysis
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill's primary function is to analyze data from external scientific file formats (e.g., CSV, XML, JSON). This creates an indirect prompt injection surface where maliciously crafted data could attempt to influence the agent's behavior.
- Ingestion points: Data files are processed in the 'Data Loading' (Step 3) and 'Quality Assessment' (Step 4) sections of SKILL.md.
- Boundary markers: The methodology lacks instructions to use delimiters or safety prompts to isolate untrusted data content from instructions.
- Capability inventory: The agent has capabilities to read files, perform statistical analysis, and generate summary reports (file-write operations).
- Sanitization: No explicit sanitization or content validation steps are mentioned for the data ingested from scientific files.
- [COMMAND_EXECUTION]: The workflow in SKILL.md recommends that the agent identify missing dependencies and install them using 'pip install'. Although the listed libraries are well-known scientific packages, this pattern represents a capability for system command execution based on external file detection.
Audit Metadata